[jdk11u-dev] RFR: 8355779: When no "signature_algorithms_cert" extension is present we do not apply certificate scope constraints to algorithms in "signature_algorithms" extension

[Antonio Vieiro]

Clean backport of [JDK-8355779](https://bugs.openjdk.org/browse/JDK-8355779) as a follow-up of [JDK-8349583](https://bugs.openjdk.org/browse/JDK-8349583) on #3130.

Security tests pass:


==============================
Test summary
==============================
   TEST                                              TOTAL  PASS  FAIL ERROR   
   jtreg:test/jdk:jdk_security                        1366  1366     0     0   
==============================
TEST SUCCESS

-------------

Depends on: https://git.openjdk.org/jdk11u-dev/pull/3130

Commit messages:
 - Backport 70b4f5bdcc67a3a7f87ebbf106afbfab48042c5c

Changes: https://git.openjdk.org/jdk11u-dev/pull/3161/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk11u-dev&pr=3161&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8355779
  Stats: 95 lines in 1 file changed: 47 ins; 44 del; 4 mod
  Patch: https://git.openjdk.org/jdk11u-dev/pull/3161.diff
  Fetch: git fetch https://git.openjdk.org/jdk11u-dev.git pull/3161/head:pull/3161

PR: https://git.openjdk.org/jdk11u-dev/pull/3161